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The Claims 

The following is a listing of the claims, which are presented in accordance with revised 
37 C.F.R. $1,121. 

1- (Currently amended) A method for providing accessibility to a plurality of 
remote service providers across a network via a single login to a host service provider, each of 
the plurality of remote service providers being accessible through the host service provider and 
each of the plurality of remote service providers having separate login procedures requiring data, 
the method comprising the steps of: 

the host service provider receiving the single login from a user, the host service provider 
having a universal session manager; 

the universal session manager retrieving data from a validation database based on the 
single login to the host service provider, wherein the data is effective for accessing a selected one 
of the plurality of remote service providers, and wherein the data is based at least in part on the 
single login; 

the universal session manager transmitting said data to the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
sided authentication; and 

the host service provider directing the user to the remote service provider in such manner 
that the user is simultaneously presented with information, in a single graphical user interface, 
that is provided by both the host service provider and the remote service provider; and 

connecting to a trusted service provider having special access requirements, wherein 
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a trusted service module acts as an intermediary between tbe host service provider and the 
trusted service provider; and 

wherein the trusted service module receives a session© from the trusted service 
provider; 

wherein the trusted service module places a text file on the user's network data 
acquisition module; and 

wherein said text file comprises a cookie; 

the method further comprising the step of registering the user with the remote service 
provide r; aijd 

wherein the two-^ded authenticatio n is a ryiple handshake, tfte tripl e handshake 
including: 

the universal session mana^r s ? ndinf? a username and password to rhe remote 

service provider constituting a lopm request: 

the remote service provider sending the universal session manager a reply to the 
lofljn req uest; and 

, the universal session manager cjirectinf? the user to the remote Service provjfer; 

sad 

wherein, thf f PTO^* *? rv 1^ ft provider ^ a rfkrincr remote site from the host service 

p fQVjctgk.and eanft step of the {riple handshake is effected directly fretween \\\% Hftjvefsal session 
manager and tjie remote service provider . 
2-6. (Canceled) 

7. (Currently amended) A system for providing accessibility to a plurality of 
remote service providers via a single login to a host service provider, each of the plurality of 
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remote service providers being accessible through the host service provider and each of the 
plurality of remote service providers having separate login procedures requiring data, the system 
comprising: 

a user system having a network data acquisition module; 
a plurality of remote service providers; 

a host service provider for receiving the single login, the host service provider having a 
universal session manager, 

the universal session manager receiving data from a validation database based on the 
single login to the host service provider, the universal session manager passing the data> which is 
required for access to the remote service provider, directly to the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
sided authentication, the two-sided authentication being performed directly between the 
universal session manager and the remote service provider; and 

the validation database for storing the data for accessing the remote service provider, the 
universal session manager communicating with the validation database to obtain the data; and 

wherein the host service provider directs the user to the selected one of the plurality of 
remote service providers using the data; and 

the host service provider directing the user to the remote service provider in such manner 
that the user is simultaneously presented with information, in a single interface, that is provided 
by both the host service provider and the remote service provider; and 

■ said validation database further storing information for registering the user with the 
remote service provider, and 
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the system further comprising 4 trusted service module that serves as an intermediary 
between the host service module and a trusted service provider. 

wherein said trusted service provider is a remote service provider with special access 
requirements. 

wherein the network data acquisition module is an Internet browser, 
wherein the remote service provider farther comprises a registration module and a login 
module: 

wherein the login module receives the data for gaining access to the services 
provided by the remote service provider, and 

wherein the registration module receives the data for registering a user with the 
remote service provider; and 

the universal session manager registering the user with the remote service provide r: and 

— wherein the two-sided amftenTication is a triple ^adshajce. the triple hfl[#h a fe bejn P 

performed bv 

ffte qm'versal session manager s ending a ijsername and pfls^wofcj to foe remote 

service provider constituting a login, request: 

the remote service p rovider sending fte unj vftrs^ session manager ft pppjy to the 
ioflin request: and 

- The univ ersal session mapq ffi pr direyf jng [ foe user to the remote servjce provider: 

and 

wherein the remote ser vice provide r \$ q disrjncr remote si^e frorfl ftp frost service 

provider T and e ^ch step of the triple hft ndsfrafe is effected dip ^y f^p^ween the universal fr^jftn 
manapgr and rfa ff mote servicf 
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8-15. (Canceled) 
16 (Canceled) 

17. (Canceled) 

18. (Canceled) 

19. (Previously presented) The method of claim 17, whereto the validation database 
transmits data to the universal session manager of the host service provider indicating which 
services the user is enrolled. 

20. (Previously presented) The meihod of claim U wherein the host service provider 
receiving the single login from the user is performed over a network. 

2 1 . (Previously presented) The system of claim 7, wherein the validation database 
transmits data to the universal session manager of the host service provider indicating which 
services the user is enrolled. 

22. (Previously presented) The method of claim 1, wherein the host service provider 
has control of a navigation bar in the graphical user interface, and web pages from the remote 
service provider are hosted In the graphical user interface and contain a navigation bar. 

23. (Previously presented) The method of claim I, the information that that is 
provided by the host service provider is adjacent the information thai is presented by the remote 
service provider. 

24. (Previously presented) The meihod of claim I, further including the host service 
provider presenting the user with information, simultaneously to the remote service provider 
presenting the user with information, both such information being displayed to the user in 
respective areas of the single graphical user interface. 
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25. (Previously presented) The method of claim 1 , further including the host service 
provider presenting the user with information in a first area of the single graphical user interface, 
simultaneously with the remote service provider presenting the user with information in a second 
area of the single graphical user interface. 

26. (Previously presented) The method of claim 25, in which: 

the first area of the single graphical user interface is an outer frame of the single 
graphical user interface; and 

the second area of the single graphical user interface is a main bottom panel. 

27. (Previously presented) The method of claim 25, in which: 

the first area of the single graphical user interface is an ourer frame and top 
navigational bar of the single graphical user interface; and 

the second area of the single graphical user interface is a main bottom panel and a 
left-hand navigation bar of the single graphical user interface. 

28. (Previously presented) The method of claim 27, the host service provider 
controlling the first area, and the left-hand navigation bar in the second area providing the user 
with remote service navigation. 

29. (Previously presented) A method for providing accessibility to a plurality of 
remote service providers across a network via a single login to a host service provider, each of 
the plurality of remote service providers being accessible through the host service provider and 
each of the plurality of remote service providers having separate login procedures requiring data, 
the method comprising the steps of: 

the host service provider receiving the single login from a user, the host service provider 
having a universal session manager; 
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the universal session manager retrieving data from a validation database based on the 
single login to the host service provider, wherein the dara is effective for accessing a selected one 
of the plurality of remote service providers, and wherein the data is based at least in part on the 
single login; 

the universal session manager transmitting said data to the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
sided authentication; and 

the host service provider directing the user to the remote service provider in such manner 
that the user is simultaneously presented with information, in a single graphical user interface, 
that is provided by both the host service provider and the remote service provider; and 

connecting to a trusted service provider having special access requirements, wherein 
a trusted service module acts as an intermediary between the host service provider and the 
trusted service provider; and 

wherein the trusted service module receives a sessionID from the trusted service 
provider; 

wherein the trusted service module places a text file on the user's network data 
acquisition module; and 

wherein said text file comprises a cookie; 

the method further comprising the step of registering the user with the remote service 
provider; and 

wherein the two-sided authentication is a triple handshake, the triple handshake 
including; 
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the universal session manager sending a username and password to the remote 
service provider constituting a login request; 

the remote service provider sending the universal session manager a reply to the 
login request; and 

the universal session manager directing the user to the remote service provider; 

and 

wherein the remote service provider is a distinct remote site from the host service 
provider, and each step of the triple handshake is effected directly between the universal session 
manager and the remote service provider, 

30. (Previously presented) The method of claim 29, further including the 
universal session manager registering the user with the remote service provider. 

31. (New) The method of claim 1, wherein the universal session manager 
retrieving data from a validation database based on the single login to the host service provider 
includes the universal session manager transmitting the usemame and an encrypted version of 
the password to the validation database. 
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